Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
File: kHpcTqRTtGyByxNtkrkwmxRsPkU.mft (raw, json)
Hash identifier: 0FeSinl7uTSqJD3YqhgYPBXcCIfBTOa6hB45ug9jfqU=
Subject key identifier: 86:E2:DF:38:34:5B:15:6E:2A:C2:1E:8F:98:D4:53:A9:74:46:5D:41
Authority key identifier: 90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45
Certificate issuer: /CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
Certificate serial: 019A4EF5EC6A421FAD5237A11B2DFF27CAD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
Manifest number: 0A18
Signing time: Tue 04 Nov 2025 13:02:10 +0000
Manifest this update: Tue 04 Nov 2025 13:02:10 +0000
Manifest next update: Wed 05 Nov 2025 13:02:10 +0000
Files and hashes: 1: kHpcTqRTtGyByxNtkrkwmxRsPkU.crl (hash: WEdzpGgIYl8UY+As743sBTo7AG066z9IkU9gkeVLdT8=)
2: y00kCOm4x0sTFaBDOqD5L5fES6Y.roa (hash: G4M+BrvsrjKhmQGsYy0izNdpM9hsyiGzIDC7Si8ke98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ec:6a:42:1f:ad:52:37:a1:1b:2d:ff:27:ca:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
Validity
Not Before: Nov 4 13:02:10 2025 GMT
Not After : Nov 5 13:02:10 2025 GMT
Subject: CN=86e2df38345b156e2ac21e8f98d453a974465d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:a8:fa:31:02:60:47:1f:ad:9d:07:dd:21:
de:bd:1f:d6:2c:e5:33:07:33:c8:e6:af:32:82:bd:
aa:4b:c4:05:fe:2b:ea:d1:25:88:66:48:99:f1:b6:
e6:9e:32:7e:32:a0:05:f8:ce:42:a2:da:e7:37:f8:
96:f7:22:e8:31:26:71:84:df:c6:3b:2d:c1:30:18:
36:26:1c:bd:2f:ef:96:5e:2a:ef:f1:47:b0:4d:74:
a4:11:a0:82:96:c8:20:5c:78:c0:97:ba:ce:bb:7b:
8b:6e:2e:9b:35:8d:61:3c:b9:20:b6:bf:ec:b0:81:
f5:d1:cf:b3:03:77:30:f5:4d:09:3c:1e:3b:a3:98:
96:f7:d8:d4:5a:5d:23:43:62:8b:a7:f1:4b:bf:91:
c3:39:43:6e:39:f3:64:92:bc:a4:02:c2:5f:74:0e:
0a:98:67:61:9d:fc:8e:fb:3c:c4:10:de:b8:6b:92:
17:d3:89:a9:36:0d:87:78:69:ef:89:b6:68:d3:9f:
45:6a:e4:9d:37:39:f2:34:4c:ae:b7:8e:2d:5c:ac:
bc:00:a5:32:0f:32:4a:9d:04:bc:29:de:0e:8b:0d:
ad:cb:2c:90:b4:c2:e9:6f:a8:10:67:98:06:ae:ef:
5c:97:07:a3:67:8a:47:74:31:f9:85:4e:4e:c4:04:
e6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E2:DF:38:34:5B:15:6E:2A:C2:1E:8F:98:D4:53:A9:74:46:5D:41
X509v3 Authority Key Identifier:
keyid:90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2e:52:ae:21:ee:36:f7:9a:9e:3e:ae:16:fb:f5:24:a2:64:
72:88:96:8e:91:69:0a:5b:14:51:71:de:a4:d5:0d:b6:72:da:
e4:6c:6c:f5:b4:3a:bd:55:dd:0f:38:ee:83:20:a4:ec:d0:2d:
0a:2f:0f:69:65:15:aa:54:3a:74:92:27:3d:1e:85:47:0e:d8:
b4:cf:93:73:3f:ee:13:a3:a4:af:4c:2e:85:b3:26:fb:cf:72:
ae:11:d7:59:f4:1e:19:8e:f9:2a:4a:c3:b9:85:55:4c:e2:13:
33:1f:cf:39:6d:f8:df:e1:f1:0e:0b:13:5f:fd:21:77:15:d9:
83:e0:84:3f:77:97:bd:99:45:82:cb:38:29:fa:ef:4b:3c:40:
b4:77:93:70:7d:6d:8e:3d:a4:75:14:a0:dc:7c:c9:ba:5d:32:
2f:f5:d2:b3:a5:0f:67:4d:1b:3e:26:a8:d2:c4:b8:41:37:2b:
0a:a8:ca:0b:57:a7:ba:12:9c:9e:84:ab:03:c7:d7:62:92:8b:
4c:24:6a:06:57:ff:24:81:05:7e:2e:85:47:f1:b8:44:f6:84:
f7:b1:1a:af:9c:cd:a2:a6:9b:c0:94:81:61:94:18:63:03:a6:
c4:5d:75:37:b6:23:15:37:f3:ba:52:8c:01:2a:55:c7:40:a7:
0f:89:bf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:17 2025 by rpki-client